CVE-2025-39403

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16919...

GHSA-32X6-QVW6-MXJ4

creationtimestamp| type| source ---|---|--- 2025-04-23 19:05:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13117...

CVE-2022-31164

creationtimestamp| type| source ---|---|--- 2025-04-23 18:05:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13096...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Dell Unity 输入验证错误漏洞

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from a URL redirection vulnerability that stems from a URL redirection to an untrusted site, which could lead to a phishing attack. No details of the vulnerability are provided at th...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.

Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...

CVE-2024-53965

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted UR...

GHSA-4VVJ-4CPR-P986

creationtimestamp| type| source ---|---|--- 2025-01-09 18:19:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1007 2025-10-14 05:07:38+00:00| seen| https://gist.github.com/Wbaker7702/53198661ba029cb1af08a9ce551dbeb5...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing uses a web link with untrusted references to an external site.

Summary When an user clicks a link to an external site, and that link has the target="blank" attribute, then the new site will be opened into a new tab or window, but will share its process with the original tab or window. The window.opener object stores information from the original window, so i...

CVE-2024-39727

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser...

CVE-2024-39727

CVE-2024-39727 affects IBM Engineering Lifecycle Optimization components. The IBM bulletin describes that IBM Engineering Insights 7.0.2 and 7.0.3 use a web link with untrusted references to an external site, enabling a remote attacker to expose sensitive information or perform unauthorized actio...

The vulnerability of the Dell ECS storage platform lies in the redirection of the URL to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the Dell ECS storage platform relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a hacker to redirect users to arbitrary URL addresses...

SAMSUNG Gaming Hub 安全漏洞

SAMSUNG Gaming Hub is a gaming center application from Samsung South Korea. A security vulnerability exists in SAMSUNG Gaming Hub versions prior to 7.1.03.7, which stems from insufficient URL authenticity validation and allows remote attackers to load arbitrary URLs in their web view...

CVE-2024-49328

creationtimestamp| type| source ---|---|--- 2024-10-20 10:44:06+00:00| seen| https://t.me/cvedetector/8396 2024-11-07 17:02:41+00:00| published-proof-of-concept| https://t.me/CNArsenal/3422 2024-11-07 18:35:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11404...

CVE-2024-10004

Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in the padlock icon showing an HTTPS indicator incorrectly This vulnerability affects Firefox for iOS 131.2...

WordPress plugin Simple Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-42322

creationtimestamp| type| source ---|---|--- 2024-08-17 12:17:50+00:00| seen| https://t.me/cvedetector/3390 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

PT-2024-6824 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP affected versions not specified Description: The issue allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by the server...